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Abstract 

According to quantum theory, the outcomes obtained by measuring an entangled state 

necessarily exhibit some randomness if they violate a Bell inequality. In particular, a maxi- 

{S) nial violation of the CHSH inequality guarantees that 1.23 bits of randomness are generated 

i by the measurements. However, by performing measurements with binary outcomes on two 

subsystems one could in principle generate up to two bits of randomness. We show that 

correlations that violate arbitrarily little the CHSH inequality or states with arbitrarily little 

entanglement can be used to certify that close to the maximum of two bits of randomness are 

produced. Our results show that non-locality entanglement, and the amount of randomness 

i— — i that can be certified in a Bell-type experiment are incquivalent quantities. From a practical 

i-G point of view, they imply that device-independent quantum key distribution with optimal 

key generation rate is possible using almost-local correlations and that device-independent 

randomness generation with optimal rate is possible with almost-local correlations and with 

—j almost-unentangled states. 

^h Two of the most remarkable features of quantum theory are its intrinsic randomness and 

its non-local character. The conclusion that measurements on quantum systems yield random 

,__! results was first reached by Born and is now one of the basic axioms of the theory. The intuition 

that measurements on entangled quantum systems give rise to correlations that exhibit some 
form of non-locality was made precise by Bell, whose work led the way to the introduction of a 

j — series of inequalities that must be satisfied by any locally causal theories, but which are violated 

CN by quantum theory [IJ. 

t*^" These two - a priori independent - properties of quantum theory are related through a 

third one, the no-signalling principle. The no-signalling principle states that the outcomes of 
measurements on separated systems cannot be used to send instantaneous signals. Any theory 
that satisfies the no-signalling principle and which is non-local, is also necessarily intrinsically 
random [2 [3l H] • More precisely, if the measurement outcomes of a Bell- type experiment violate 
a Bell inequality, then these outcomes cannot be perfectly predicted within a no-signalling 
(hence within quantum) theory. This conclusion holds independently of any hypothesis on the 
type of measurements performed or on the quantum systems (it even hold in non-quantum 
theories provided they satisfy no-signalling). Conversely, if no Bell inequalities are violated in 
a Bell experiment, then the experimental results admits a purely deterministic explanation if 
no additional hypothesis are made on the underlying system |5]. 

The quantitative aspects of this fundamental connection between non-locality and random- 
ness have hardly been explored. Here we address this problem within the quantum formalism 
(i.e. we do not look at post-quantum theories) and investigate the relation between non-locality, 
entanglement (which is necessary to produce non-local correlations), and the amount of ran- 
domness necessarily present in a Bell experiment. 
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Beyond its fundamental interest, this question is also motivated by the recent development 
of device-independent randomness generation (DIRNG) (6j [7] and quantum key distribution 
(DIQKD) IHHIj. The observation that the outcomes of measurements performed on two 
separate quantum systems are necessarily random if they violate a Bell inequality can be ex- 
ploited to certify the randomness of strings or the secrecy of shared keys generated in quantum 
cryptographic protocols without the necessity to model the quantum state or the measurement 
devices, thereby notably increasing the security of such protocols. The quantitative study of the 
relation between entanglement, non- locality, and randomness allows to determine the minimal 
resources needed for DIRNG and DIQKD. 

We focus here mostly on the simplest case in which two measurements with binary outcomes 
can be applied to each one of two separated quantum systems. In this context, the only facet- 
defining Bell inequality is the CHSH inequality |101 lllj . whose violation is thus a necessary 
condition to certify the presence of randomness. The amount of violation of the CHSH inequality 
can also be considered a natural measure of non-locality: it uniquely determines for instance the 
maximum local weight of a given set of correlations or the minimal amount of communication 
required to simulate them [12]. Naively, one would thus expect a direct relation between the 
amount of CHSH violation, and therefore of entanglement, and the randomness produced in a 
Bell-type experiment, i.e., the less CHSH violation or entanglement, the less randomness. 

Our analysis, however, show that this intuition is not correct and that the relation between 
these three concepts is much subtler than expected. In our scenario, where two subsystems 
are measured and where each measurement results in one out of two possible outcomes, the 
maximal amount of "local randomness" characterizing an individual outcome is 1 bit, while the 
maximal amount of "global randomness" characterizing the joint pair of outcomes is 2 bits. We 
introduce here non-local correlations that are arbitrarily close to the local region (i.e, which 
violate arbitrarily little the CHSH inequality) or that arise from states with arbitrarily little 
entanglement, yet which necessarily imply that (arbitrarily close to) the maximal amounts of 
local or global randomness are generated each time the system is measured. To obtain these 
results we partially characterize the boundary of the set of quantum correlations by introducing 
a family of Bell inequalities and by determining the quantum points that maximally violate 
them, i.e., by computing their "Tsirelson bounds" |13j . 

Before presenting our main results, we introduce the notation and definitions that will be 
used in the remainder of the paper and establish three useful technical facts. 

1 Notation and definitions 

Bell experiments. We consider measurements on two distinct systems, denoted A and B. 
On system A, one of two possible measurements u E {1,2} are carried out, resulting in one 
of two possible outcomes a E { — 1, 1}- Similarly, measurements v E {1,2} are carried out on 
system B, yielding outcomes b E {— 1, 1}. We denote P(ab\uv) the probability to obtain the pair 
of outcomes (a, b) when the measurement settings (u, v ) are used. We focus here on quantum 
probabilities, i.e. we assume that the distribution P is of the form 

P(ab\uv)=ix[M a{u ®M b]v p], (1) 

where p is a quantum state in some arbitrary Hilbert space Ha <8> Hb an( A M a \ u and M b i v 
are measurement operators, i.e., they are positive and sum to the identity on Ha and Hb, 
respectively. By increasing the dimension of the Hilbert spaces Ha and Hb, we can without loss 
of generality assume the positive operators M a \ u and M b \ v to be projections. The measurements 
on system A and B can thus be described by hermitian observables A u = M i u — Mu n and B v = 



Mq\ v — M\\ v with eigenvalues ±1. We say that the state p and the observables M = {A U ,B V } 
form a quantum realization {p, M} for P. In term of the expectation values of the measurements 
A u and B v , the probabilities P(ab\uv) can be expressed as 

P(ab\uv) = - (1 + a(A u ) + b(B v ) + a&(A UJ B„)) . (2) 

A Bell inequality is a linear constraint I = X^a6«u IabuvP{ab\uv) < II on P that is satisfied 
by every locally causal distribution, but which can be violated by quantum distributions. The 
bound II is called the local bound of the inequality. We say that P is non-local if it violates 
a Bell inequality, i.e., I > II- In our scenario (two binary measurement per party), there is a 
unique (up to relabelling of the measurement outcomes and settings) facet inequality, the CHSH 
inequality 

/ = (A 1 B 1 ) + (A 1 B 2 ) + {A 2 B l ) - (A 2 B 2 ) < 2. (3) 

That is, an arbitrary Bell inequality is violated only if the CHSH inequality is also violated. 
Furthermore, the amount of violation / > II of the CHSH inequality can be viewed as a proper 
measure of the non- locality of a given distribution P: for instance the optimal amount of average 
communication C required to simulate classically a non-local distribution is directly related to 
the CHSH violation through C = 1/2 - 1 [TJ]. 



Randomness. Within the quantum formalism, two types of randomness have to be distin- 
guished: the genuine, intrinsic randomness of pure states and the randomness of mixed states, 
which merely represents a lack of knowledge about the definite state of the system. It is the 
first type of randomness that we want to characterize here. 

We quantify the randomness of the outcome pair (a, b) resulting from the measurement of 
the observables A and Bona given pure state \ip) £ Ha <S> Hb through the guessing probability 

G '{ip, A, B)= max P{ab\ip, A, B) . (4) 

ab 

where P(ab\ip, A, B) = \ (1 + a(A) 1 p + b{B)^ + ab(AB) 1 p) are the corresponding joint outcome 
probabilities. The quantity Q corresponds to the probability to guess correctly the outcome 
pair (a, b), since the best guess that one can make is simply to ouput the most probable 
pair. The guessing probability can be expressed in bits and is then known as the min-entropy 
Hooiij), A,B) = — log 2 G(tp, A, B). If a specific pair of outcomes (a, b) is certain to occur, then 
the guessing probability takes its maximal value 1 corresponding to bits of min-entropy, while 
if all four possible pairs of outcomes are equally probable, it takes its minimal value 1/4 corre- 
sponding to 2 bits of min-entropy. 

Example: Let ip = (|00) + |ll))/\/2, A = a z , B = a x . Then P(ab\ip,A,B) = 1/4 for all 
a, b = 0, 1, hence G($, A, B) = 1/4. 

For a mixed state p £ B(Ha <8> Hb), we define the guessing probability associated to mea- 
surements A and B as 

G(p,A,B) = m a xJ2 < & G ^ A > B )- ( 5 ) 

where the maximum is taken over all pure state decompositions p = ^2,\ ( ?a|V'a)(' ( /'a|- This cor- 
responds to the maximal average guessing probability given the knowledge of which underlying 
state |-0a) in the ensemble has been prepared. Equivalently, it corresponds to the maximal 
guessing probability of someone that possess a quantum system correlated with p and who can 
perform measurements on his system to guess the outcomes (a, b). 

Example: Let p = (|00)(00| + |ll)(ll|)/2, A = a z , B = a x . Then P(ab\p,A,B) = 1/4 for all 
a, b = 0, 1 as above, but G(V>, A, B) = 1/2. 



Our aim here is to analyze the fundamental constraints on the randomness of a joint proba- 
bility distribution P(ab\uv) that follow from its non-local properties alone, independently of any 
particular quantum realization. Given a quantum distribution P, we thus define the (realization- 
independent) guessing probability of the outcome pair (a, b) associated to the measurement 
choices (u, v) as 

G(P,u,v)= max G(p,A u ,B v ) (6) 

{p,M}->P 

where the maximum is taken over all quantum realisations {p, M} compatible with P, i.e., 
satisfying P(ab\uv) = tr[M a | u ® M b \ v p\. 

Example: Let P be the quantum distribution that arises from the measurements A\,B\ = a z , 
A 2 = B 2 = a x on the state ip = (|00) + |ll))/\/2. Then we have P(ab\l, 2) = 1/4 for all a, b = 
0,1, as in the two examples above. However G(P, 1, 2) = 1 since we can reproduce the entire 
distribution P by measuring the C 4 <S>C 4 state pab = \ Yl zo zi=o(\ z o z i)( z o^i\)a^>(\zqZi)(zoZi\)b 
with the observables Ai = B\ = a z ® I, A 2 = B 2 = I <S> o z . 

In the same way as above, we can also define the (realization-independent) guessing prob- 
ability G (P, u) of the single outcome a associated to the measurement choice u, which has 
corresponding min-entropy comprised between and 1 bits. In the following, we will often 
write G U v and G u for G(P, u, v) and G(P, u) to shorten the notation. 

Randomness and non-locality. A distribution P is said to be local deterministic if a mea- 
surement of u always return an outcome a = a u and a measurement of v always return an 
outcome b = )3 V , i.e., if P(ab\uv) = 8(a,a u )5(b,f3 v ). Clearly a local deterministic distribu- 
tion admits a pure-state quantum realization with guessing probability 1 (take for instance 
\ip) = |ai,a2) ® |$l,/?2)> A u = Y^ a ct u \a u ){a u \ and similarly for B v ). Since a distribution is 
local if and only if it can be written as a convex sum of local deterministic distributions [5] , the 
violation of a Bell inequality is a necessary condition for the guessing probabilities G uv and G u 
to be different from 1. Furthemore, it is also a sufficient condition, since non-local correlations 
cannot be reproduced deterministically in quantum theory 0E1I3]. The guessing probabilities 
G uv and G u are thus different from 1 if and only if P violates a Bell inequality, that is in our 
scenario, if and only if it violates the CHSH inequality. 

In general, for any given Bell inequality, one can derive bounds G uv < f U v(I) and G u < g u (I) 
on the guessing probabilities as a function of the amount of Bell violation I [7j. Here, we will 
characterize the amount of randomness associated to the Bell expressions 

li = P{At) + aiAxBx) + a{A 1 B 2 ) + {A 2 B X ) - {A 2 B 2 ) , (7) 

which depend on two parameters a and j3. Without loss of generality, we assume that a > 1 
and /3 > (the expressions where either a < 1 or /3 < can be shown to be equivalent to the 
expressions with a > 1 and j3 > by relabelling the measurement settings and outcomes). To 
simplify the notation we denote by I a the Bell expression I a = I® = a(A\Bi) + a{A\B 2 ) + 
(A 2 Bi) — (A 2 B 2 ). When a = 1, I a coincides with the CHSH expression. The local bound of I& 
is easily found to be j3 + 2a. 

In the following, we will be interested in the maximal amount of randomness that can in 
principle be guaranteed by the Bell expressions la, that is, we will be interested in the guessing 
probabilities G uv and G u under the constraint that I& is maximally violated. 

2 Technical preliminaries 

We start by presenting three useful technical results. 



Reduction to two dimensions. First, note that in our scenario (two observables with bi- 
nary outcomes per system), it is sufficient to restrict the analysis to pure two-qubit states. 
More precisely, let G(^f,A u ,B v ) < f uv (I) and G(^,Au) < g u (I) be bounds on the guessing 
probabilities that are satisfied by any pure two-qubit state 

|tf) = cos0 |OO)+sin0 |11) (8) 

and non-degenerate Pauli observables 

A u = a u - a , B v = b v ■ a (9) 

yielding a Bell violation /. In the above expressions, 9 is an angle satisfying < 9 < vr/4, 
a = (ai, o"2, 03) are the three Pauli matrices, and a u = (a u , a u , a u ) and b v = (6j, b 2 , b%) are unit 
vectors. Without loss of generality suppose that the functions f U v(I) and g u (I) are concave (if 
not take their concave hull). Then for any quantum distribution P with Bell violation I, it 
holds that G uv < f uv (I) and G u < g u {I)- 

To show this, we recall the well-known fact that in our scenario any distribution P arising by 
measuring a state p G B(Ha®Hb), where the dimensions dim(i? J 4) and dim(HB) are in principle 
arbitrary, can always be expressed as a convex combination P = ^2 c p c Pc of distributions P c 
arising from measurements on systems with dim(HA) < 2 and dim^Hs) < 2 (9j[H]. Further, 
by convexity, it is sufficient to consider the case where each P c arise from measuring a pure 
state. Note that if either dim(iJ^) = 1, or dim(i^B) = 1, or one of the operators A u or B v is 
degenerate (e.g. A u = ±7), then the corresponding point P c is necessary local; but any local 
distribution can be expressed as a convex combination of points obtained by measuring the state 
1 00) with ±a z observables. It is therefore completely general to assume that each P c admits a 
realization in term of a pure two-qubit state, which can always be written as ([8]) in the Schmidt 
basis, and measurements corresponding to non-degenerate Pauli observables of the form ([9]). 

Now let ip be an arbitrary (not necessarily two-qubit) pure state and A u , B v observ- 
ables yielding a violation I. We then have using the above observation that G{ip,A u ,B v ) = 
m&x ab P(ab\ip,A u ,B v ) = max a6 ^ c ^c-Pc(a&|™) < J2 c Pc max abP c (ab\uv) = Y. c Pc 
G(ip c ,A u , c ,B V)C ) < YlcPcfi^c) < fuv(^2 c p c Ic) < fuv(I), where we have expressed the prob- 
abilities P(ab\ip,A u ,B v ) as a convex sum of probabilities P c (ab\uv) arising from pure two-qubit 
states ip c and non-degenerate Pauli observables A Ufi , B VyC in the second equality, have used the 
bound on the guessing probability valid for pure two-qubit states in the second inequality, and 
the concavity of the function f uv in the third inequality. Since the bounds G(ip, A u , B v ) < f uv (I) 
hold for any pure state, it follows from the definitions (pi) and ([6]) and again the concavity of 
f uv that G uv < /(/) hold for any distribution P. The same reasoning applies to G u . 

Bound on predictability. Second, note that by measuring the state ([8]) with the observables 
Q, one necessarily has 

-cos 2(9 < (Au) < cos26>, (10) 

the extremal values being obtained when A u = ±a z . One finds similarly —cos 29 < (B v ) < 
cos 29. 

Optimal violation of I a for 2x2 systems. Finally, for any set of measurements S 
performed on the state pi), the following inequality necessarily holds 

I a < 2V a 2 + sin 2 29. (11) 



Furthermore, if 8 > there are only two probability distributions P saturating this inequality 
defined by the expectation values 



(Ai) = ±cos2#, (A 2 ) = 0, 

(Bi) = (B 2 ) = ±cos/icos26>, 
(A1B1) = {A 1 B 2 } =cos/U, 
(A 2 Bi) = -(A 2j B 2 ) = sin20sin//, 

where tan/i = sin2#/a. These two points are obtained using the Pauli observables 

A\ = ±a z , 

A 2 = cos </? o x + sin </? ciy , 

Bx = ± cos /i <7 Z + sin /i (cos <po x — sin </> a^) , 

B 2 = ± cos /i <7 2 — sin /i (cos <po x — sin </> u^) , 

where </3 € [0, 2tt[ is a free parameter. 

To show this, it is convenient to rewrite the state ([8]) as p = |\P)(\I/| with 



1 , o/i *® 

- + cos 2t/ — — 

4 4 



- + cos 26 — h y Tj 



Oi 0$ (To 



V 



where the 3x3 real matrix T has components 

T xx = sin 28 , T yy = - sin 28 , T zz 



K) 



1 T ■ 
J-, -tj.j 



for i ^ j 



(12) 



(13) 



Following the method exposed in [15], we introduce two normalised mutually orthogonal vectors 
ex and c 2 by 

bx + b 2 = 2cos/i c*i ; bx — b 2 = 2sin/i c 2 , (14) 

where /i G [0, |]. We can then write 



I a = 2a cos [i (oi • T c*i) + 2 sin /j ((i*2 ■Tc 2 ). 



(15) 



Let us now maximise I a over all measurements Ax, A 2 , Bx, B 2 , while keeping the state (i.e. T) 
fixed. We find 



max I a = max 2acos/i \T cx\ +2sin/i \T c 2 \ 

= max 2\/a 2 \Tcx\ 2 + \Tc 2 \ 2 , 

ClC 2 



(16) 



where the first equality obtains when a u = T c u /\T c u \ and the second equality when tan/i 



sin2#/a. Since ex and c 2 are orthogonal, and since a > 1, the maximum of (16) is obtained 



when ex = ±l z lies along the direction of the largest eigenvalue of T, and c 2 lies in the x, y plane 
along some arbitrary direction ip. We thus find that for the state (81), I a < 2y a 2 + sin 2 20, 
where this inequality is saturated using measurements given in eq. (13). Such measurements 



yield the expectation values (12) for any value of the free parameter ip. 



3 Results 



Arbitrarily high randomness from arbitrarily low non-locality. From (11), we deduce 



that the maximal quantum violation of the I a inequality is 2y/a 2 + 1 and that it can be obtained 
by measuring a maximally entangled state, i.e. 9 = 7r/4 in ([8]). Further note from (12) that 
there exists a unique pure two-qubit quantum probability distribution achieving this maximum 
defined by 



(AiB v 



(B v ) = 
a 



Vl + a 2 ' 



(A 2 B V 



■iy 



(17) 



Vl + a 2 



By the convex reduction of general quantum distribution to two-qubit distributions, this prob- 
ability distribution is actually the unique quantum distribution reaching the maximal quantum 
value 2\/a 2 + 1. The guessing probabilities G uv and G u at the point of maximal violation thus 



simply correspond to the guessing probabilities of the distribution (17). 

In the case a = 1, we recover the well known properties of the CHSH expression. It is 
bounded by I\ < 2\/2 (the Tsirelson bound) and at the maximum the measurements A u and 
B v are locally completely uncertain, i.e. G u = G v = 1/2. While Alice's and Bob's outcomes 
are locally completely random, they are not completely uncorrelated and one finds G uv = 
1/4 + v2/8 — 0.427, corresponding to — log 2 G uv ~ 1.23 bits of global randomness in the pair 
(a,b). 

Let us now consider the I a inequality with a > 1. As in the CHSH case, we see from 



(17) that at the point of maximal violation, the outcomes of A u and B v are locally completely 
uncertain, i.e. G u = G v = 1/2. Note, however, that when the I a inequality is maximally 
violated, the CHSH inequality has the value I\ = 2(a + l)/va 2 + 1 — 2 + 2/a, i.e., for large 
a, the CHSH violation is arbitrarily small. Thus we see that perfect local randomness can be 
obtained with points that are arbitrarily close to the local region. 



A stronger results holds if we consider the global randomness. From (17), we see that at the 
point of maximal violation of the I a inequality, the guessing probability G(P, 2, v) = 1/4 x (1 + 
1/Va 2 + 1) which is smaller (i.e. it corresponds to more randomness) than the CHSH guessing 
probability for any a > 1. Furthermore, for large a, we have — log 2 G(P, 2, v) ~ 2 — ln(2)/a, 
which is arbitrarily close to the optimal value of 2 bits of global randomness even though the 
quantum point becomes arbitrarily close to the local region. 

Note that in the case of the local randomness, we can characterize the guessing probability 
G u not only for the point of maximal violation but for any degree of violation. That is we 
obtain the complete curve G u < g(I a ), which takes the form 



G ^\ + \ 



l + a 2 



I 2 



(18) 



This bound is tight in the case u = 1. It was derived previously in the CHSH case (a = 1) for 
qubits (i.e. not in a device-independent way) in [16], and in the device-independent scenario in 

mm 



To show (18), remember that it is sufficient to establish this relation for the case of pure 



two-qubit states feb, as discussed previously. From Eq. (11), it follows that the only states 



compatible with a given value of I a , are those satisfying cos 29 < y/\ + a 2 — I„/4. Using this 
inequality in (10), we obtain (18). Note that this bound is tight in the case u = 1, since the 



correlations (12) saturating (11) for fixed 9, also saturate (10) 



Perfect local randomness from any partially entangled state. Let us now char- 
acterize the point of maximal violation of the inequality la with /3 > 0. As usual, it is 



sufficient to consider pure-state two-qubit correlations. Combining Eq. (10) and (11), we 
find the inequality (A\) < yl + a 2 — 7 2 /4. Inserting this bound for (Ai) in (M), we ob- 
tain la < I a + fi^J\ + a 2 — 7 2 /4. This expression is easily seen to be maximized when 
I a = 1\J\ + a 2 /y/l + /3 2 /4, implying that the maximal quantum violation of the inequality 
la is 2^(1 + a 2 )(l + /3 2 /4). Furthermore, provided that /3 / 2/a, the inequality (.Ai) < 
y/l + a 2 — 7 2 /4 that we used in the derivation of this bound is uniquely saturated by the 
quantum point ( |12[ ) (with the + sign) and thus we necessarily have at the point of maximal 
violation that {A 2 ) = 0, i.e. G2 = 1/2 for any f3 7^ 2/a. Note further that the maximal vi- 
olation is obtained by measuring the state (p| with 9 such that I a = 1\J\ + a 2 / ' \J\ + /3 2 /4 = 
2\/a 2 + sin 2 26>, or sin 29 = yj{\ - a 2 /3 2 /4)/(l + /3 2 /4). Taking for instance a = 1 and < j3 < 
2 therefore implies that 1 bit of local randomness can be certified by the violation of a Bell 
inequality for any partially entangled state. 

Arbitrarily high global randomness from almost unentangled states. We showed 
above that using the I a inequality in the limit a — > one can certify that arbitrarily close to 2 
bits of randomness are produced from a 2 x 2 maximally entangled quantum system. We now 
show that one can also certify that arbitrarily close to 2 bits of randomness are produced in the 
limit where the 2x2 system tends towards an unentangled state. 

To this end, we consider a slightly more complex situation than the one analyzed so far, in 
which Alice and Bob each have four two-outcome measurements Ai,A2,A' 1 ,A 2 and Bi,B2,B[, B' 2 
(since the measurements have binary outcomes, the maximal randomness associated to a pair 
of joint measurements is still 2 bits). Let IJ& and 7'^ denote the Bell expression (M) obtained 
using the unprimed measurements A U ,B V , or the primed measurements A' U ,B' respectively, 
where for 7'^ the roles of Alice and Bob are reversed. Suppose that both la and 7'^ are 
maximally violated, i.e., Ia = I 1 a = 2\/(l + a 2 )(l + /3 2 /4). To determine the corresponding 
guessing probability G uv , it is clearly sufficient to characterize the maximal guessing probability 
G(^,A U ,B V ) for all pure states ^ and all observables for wich both la and I a are maximally 
violated. From the previous results, we know (provided that (3 7^ 2/a) that the outcomes of 
A2 and B' 2 are locally completely random, i.e., (^2)^ = {B' 2 )^ = 0. We now show that the 
results of A2 and B 2 are almost not correlated for f3 — > 2/a, more precisely we show that 
\(A 2 B 2 )y\ = y/(l - a 2 /3 2 /4)/(l + /3 2 /4) for all |tf). If we take, e.g., a = 1, /3 = 2 - e, this 
implies that G{V,A 2 ,B' 2 ) = (1 + |(A 2 )*| + \(B' 2 ) 9 \ + \(A 2 B 2 )y\)/4 ~ 1/4 + 1/4 y^/2 and thus 
G22' — 1/4 + l/4-y/e/2. Moreover, a maximal violation of both 7« and I a can be obtained by 
measuring a state (|8j) with sin 29 ~ ye/2. We thus see that arbitrarily close to 2 bits of global 
randomness can be certified using states that are almost unentangled. 

The intuition behind this result is that in the limit 9 — > the state tends to |^) —> |00) while 
A2 and B' 2 are both measurements in the x, y plane (see eq. ( 13 )). Hence the the corresponding 
measurement outcomes become uncorrelated random bits in the limit. The main difficulty is 
that since this Bell experiment involves four measurements per party, we cannot directly reduce 
the analysis to two-qubit states. 

However we can simultaneously block-diagonalise in blocks of size 2 the pairs of observables 
Ai,A2 and 7?i,7?2, as well as the pairs of observables Ai,A' 2 , B[, B' 2 [3 [9]. Consider first 
the block-diagonalisation of the pairs of observables Ai,A 2 and 7?i,7?2- Let {|0j),|lj)} (i = 
1, . . . ,Na) denote a basis for the Na blocks on Alice's side and similarly let {\0j), \lj)j} (j = 
1, . . . ,Nb) denote a basis for the Nb blocks on Bob's side. In each 2x2 block, the unique 
state maximally violating 7q is (up to local unitaries) the state \ipe)ij = cos^|0j0j) +sin#|ljlj) 
where sin 20 = y/(l — a 2 /3 2 /4)/(l + /3 2 /4). Since we suppose that the global state |\I/) violates 
maximally this inequality, it necessarily has the form |\P) = Yliij c ij\^d)ii where ^-- |c^-| 2 = 1 
and the observables have the form A\ = Yli a \ an ^ ^2 = X^ 008 ^ ^ + sin <^^cr^) and B\2 = 



Y^j cos fieri ± sin^(cos(/9jO"x — simp^a y ), i.e., they are sums of Pauli operators acting on each 
block. The angles ip% and <pj are not independent, since if Cij ^ is non zero they must be 
equal. Therefore, for all i,j for which c^ 7^ 0, one can bring <f{ = <pj = by simultaneous 
rotation of Alice's basis and Bob's basis around the z axis by opposite angles. From now on we 
assume this is the case. 

The matrix c^ has a singular value decomposition c^ = ^2 k UikC^Vkj where U^ and Vjy are 
unitary matrices and the c/% > are non-negative real numbers. We can therefore rewrite the 
state as 

l*> =Y, c k( cosd \Uk0k)+sin6\l k I k )) , (19) 

k 

where \0 k )A = Y,i U ik\^i)A, |lfc) = Y,i U ik\h)A, and \Q k ) B = Ylj V jk\®i)B, |lfc)s = Y,j V jk\U)B 
(here and below we add the index A or B whenever distinguishing between Alice and Bob's 
states is not implicit from the notation). Importantly, it is easily checked that the operators 
A\, A2, B\, i?2 have the same form expressed in the new basis as in the old basis. In particular 

^i = Efe^and^ 2 = E fe ^- 

Let us now apply the same operations to the block diagonalisation of the pairs of observables 
A[ , A' 2 , B' 1 ,B' 2 . We can bring the state to the form 

I*) = Y, c k (cos0|O' fe O' fe > +shi0|l' fc l' fc » (20) 

k 

with the operators B[ = ^ fc a'^ and B 2 = J2k ®'x ■ Note that the coefficients c k are the same and 



have the same degeneracy in eqs. (19) and (20) since the state is written in the Schmidt basis. 



However the basis states \0k)A,B, \^-k)A,B and \0' k )A,B, \^'k)A,B may differ. If the singular value 
Ck is non degenerate they may differ by a phase, whereas if the singular value Ck is degenerate 
they may differ by unitary transformations. 

Let us assume that the singular value Ck has degeneracy d. From now on we work within 
this 2d x 2d block, and drop the index k (indeed all the operators commute with the projections 
onto these 2d x 2d blocks). We thus consider the normalised state 



1 d 
I*) = -=V(cos0|O<>|O<>+ s in0|lj>|l,>) 

Vdf^ 



(21) 



= ^iZi^ ^ '^^ 6 ^^) ( 22 ) 

Vdf^ 

and measurements A2 = ^. a l x and B' 2 = ^ <r'J: (where for simplicity we have omitted the bar 
" ~ " over the states and operators). We can rewrite {O'^b = Yl m Wi m \0 m )B with W the unitary 
matrix that transform from the |0;) to the |0^) basis. We also write |1J)b = Yl,mWim\^m) B , 
where the states |1'4) must be ortogonal to the \0i)b states, hence can be written as |1")_b = 
^2 m Rim\^-m)B for some unitary matrix R. It is easily verified using these relations that the 
operator B' 2 = £,|0{)(1{| + |1{)<0{| = EJ /)( 1 '/I + |lj')(°ll- % computing explicitly the 



expectations value {A2B' 2 )q, using this last expression for B 2 on the state given by Eq. (21 ), one 
finds (A2B' 2 )y = \ cosQsmQ^T^Ru + R^) = sin(20), which is the desired result. 

4 Discussion 

In this work we have considered the relation between entanglement, non locality, and the amount 
of randomness that can be certified in a Bell- type experiment. These quantities are closely 



CHSH =2^2 



J^-^ "^^-^v Maximal 

CHSH=2+e •••/-•■• ™ .^X/' violation of /£ 

CHSH=2 4- TTTTT. V 



Figure 1: Schematic representation of the set of local correlations (L) and quantum correlations 
(Q). A Bell expression defines a hyperplane in the space of correlations. The CHSH hyperplane 
CHSH = 2 separates the local region from the non-local quantum region. When the Bell 
inequalities i£ are maximally violated, the corresponding hyperplanes become tangent to the 
quantum boundary and identify one of the extremal points of Q. The distribution P associated 
to such extremal points may be close to uniformly random for certain values of u, v, but need 
not be highly non-local as measured by the CHSH violation (as represented on the figure) or 
need not originate from maximally entangled states. 

related: entanglement is necessary for non locality, and non locality is necessary for certify- 
ing randomness. The quantitative relations between these concepts, however, are more subtle 
than expected. It was already known that entanglement and non locality are inequivalent re- 
sources |18l [TUl [2"U] . Here we have shown that the amount of randomness that can be certified 
by a Bell-type experiment is inequivalent to either of these two resources. 

Some understanding of why non-locality is inequivalent to certified randomness can be ob- 
tained by going back to the geometric picture. In our work, we have characterized part of the 
boundary of quantum correlations and have shown that there exists extremal quantum distri- 
butions P(ab\uv) which are arbitrarily close to the set of local correlations or which arise from 
partially entangled states, yet which are close to uniformly random for specific choices of u and 
v, see Figure 1. This suggests that while non- locality is necessary to certify the presence of 
randomness, its quantitative aspects are related to the extremality of non-local correlations. In 
this sense, our work goes in the same direction as [21], where extremality was identified as a 
key property for the security of DIQKD. 

From a practical point of view our results have direct applications for DIRNG and DIQKD. 
The guessing probabilies G uv and G u play a central role in the recent security proofs for, 
respectively, DIRNG j7] and DIQKD [171 [22]. Upper-bounds on these quantities, as a function 
of the amount of violation of a Bell inequality, directly translate into bounds on the amount of 
randomness generated in DIRNG protocols and on the key rate of DIQKD protocols. It follows 
in particular from our results that the CHSH inequality is not optimal for DIRNG but that 
higher generation rates, up to the optimal value of 2 bits per use of the system, can be obtained 
using other inequalities, and that randomness generation rates superior to 1 bit per use of the 
system are possible from any partially entangled states. In the context of DIQKD, the fact that 
1 bit of local randomness can be extracted from maximally entangled states irrespectively of the 
amount of violation of the CHSH inequality implies that DIQKD with an optimal asymptotic 
rate of 1 bit of secret key per use of the system is possible using correlations that are almost 
local. 

From a fundamental point of view, it is interesting to compare our results to those that can 
be established for post-quantum theories limited only by the no signalling principle. In this case, 
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the geometry of the space of non-local correlations corresponding to experiments involving two 
possible binary measurements on each subystem is very simple since the unique extremal points 
are the local deterministic correlations and the Popescu-Rohlich boxes |llj . This implies that 
the amount of certifiable randomness is proportional to the violation of the CHSH inequality, 
and reaches at most 1 bit when the CHSH violation is equal to 4. On the other hand, in the 
quantum case the amount of certifiable randomness can be arbitrarily close to the maximal 
possible value of 2 bits, i.e., more randomness can be extracted from the non-local correlations 
of quantum theory than it would be possible in the most non-local theory compatible with no- 
signalling. It would be interesting to investigate if they are other no-signalling theories allowing 
for maximal certifiable randomness. 

Finally, we have shown that arbitrarily close to 2 random bits can be certified by maximally 
entangled states, as well as by states with arbitrarily little entanglement. We conjecture that 
this value can be reached for any value of the entanglement (the parameter 9 in eq. (pi))- 
It would also be interesting to understand whether measurements beyond the projective case 
provide any advantage or whether two bits is the maximum amount of randomness that can be 
certified by 2 x 2 states. 
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